diff --git a/docs/attack_review_ground_rules.md b/docs/attack_review_ground_rules.md index 10266a44..9a7a88d6 100644 --- a/docs/attack_review_ground_rules.md +++ b/docs/attack_review_ground_rules.md @@ -21,11 +21,11 @@ If you find the web interface cumbersome, feel free to download and test the san ## Reporting Vulnerabilities Please report successful attacks with example input via [OWASP's bugcrowd queue](https://bugcrowd.com/owaspjavasanitizer) -or contact [@mikesamuel] and I will create a [repository security advisory](https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/creating-a-repository-security-advisory) to coordinate. +or contact `mikesamuel`@`gmail`.`com` and I will create a [repository security advisory](https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/creating-a-repository-security-advisory) to coordinate. If you wish to be credited, please provide a name or handle for me to credit. -If you wish to remain anonymous and still claim dinner at my expense, please create a sock account, CC `mikesamuel`@`gmail`.`com` and let me know how you will authenticate yourself should we meet. +If you wish to remain anonymous, please create a sock account, and email the address above. ## Out of Bounds We are testing the HTML sanitizer as written, not the servers on which the test framework runs, so hacking the server to change the code behind it or rewrite the HTML sanitizer is out of bounds.